AGENT SKILL SECURITY
Know what a Skill can do
before you install it.
SkillLock scans instructions and scripts for risky permissions, data transfers, and secret access — without running any code.
STEP 1
Choose a Skill folder
OR
Paste a public or connected private GitHub repository, branch, folder, or file link. Folder links scan only that folder; file links scan only that file. Private scans require the SkillLock GitHub App with read-only access to the repository you choose. Up to 100 supported text files are read; no code is executed.
01
Scan
Read the Skill instructions and text files without executing them.
02
Explain
Show what it may read, send, or run.
03
Decide
No “100% safe” promise — just clear evidence for your decision.